Home » Developer & Programmer » Application Express, ORDS & MOD_PLSQL » OS authentication in mod_plsql (Oracle 10.1.2.0.8)
OS authentication in mod_plsql [message #596464] Mon, 23 September 2013 10:03 Go to next message
VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA
Junior Member
Hi All,

Am trying to launch mod_plsql page using OS authenticated DB user (CREATE USER XXXX IDENTIFIED Externally)but stuck up with the configurations to be done in dad.conf file.

The page is working with normally created DB user (CREATE USER XXXX IDENTIFIED BY VALUES 'YYYYYYY') and the configurations in dads.conf is as below:

<Location /path/>
SetHandler pls_handler
Order deny,allow
AllowOverride None
PlsqlDatabaseConnectString ServerName:Port:DB Instance Name
</Location>

Could anyone please suggest me what should be configured in dads.conf for OS authenticated user?

With Regards,
Venkat Raghaven.D
Mob:+91-9962063360
Re: OS authentication in mod_plsql [message #596478 is a reply to message #596464] Mon, 23 September 2013 12:41 Go to previous messageGo to next message
John Watson
Messages: 8922
Registered: January 2010
Location: Global Village
Senior Member
Welcome to the forum. Please read our OraFAQ Forum Guide and please read How to use [code] tags and make your code easier to read

I do not see how it is possible to use OS authentication for a session launched through mod_plsql. The impossibility is that mod_plsql will be running under whatever account launched the Apache web listener on whatever machine Apache happens to be running on, so the OS account will be meaningless to the database. Yes, I know that you could be running Apache on the database server - but the session is still established over a network link, so the database cannot authenticate it as a local OS user. A technology limitation.

I am of course open to correction on this.
Re: OS authentication in mod_plsql [message #596505 is a reply to message #596464] Tue, 24 September 2013 02:45 Go to previous messageGo to next message
VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA
Junior Member
Thanks for the useful information John!

In such case, is there any alternative approach that you are aware off to overcome this technical limitation?

Something like using a SESSION DB user account to establish the session and allow the other user to view the page?

Regards,
Venkat Raghaven
Re: OS authentication in mod_plsql [message #596517 is a reply to message #596505] Tue, 24 September 2013 05:33 Go to previous messageGo to next message
John Watson
Messages: 8922
Registered: January 2010
Location: Global Village
Senior Member
You seem to be describing the usual situation where you have authentication details embedded in the DAD, and users never authenticate to the database. Just include lines such as this in your dads.conf:
PlsqlDatabaseUsername SCOTT
PlsqlDatabasePassword tiger
PlsqlDatabaseConnectString 127.0.0.1:1521:orcl
PlsqlAuthenticationMode Basic


Re: OS authentication in mod_plsql [message #596659 is a reply to message #596517] Wed, 25 September 2013 08:35 Go to previous messageGo to next message
VenkatRaghaven86
Messages: 3
Registered: September 2013
Location: INDIA
Junior Member
Thank you very much for the above reply John.
The above seems to work fine but doesn't suite my actual purpose because it allows all the users to launch my webpage without any authentication.

The below image represent the current architecture of the application which I developed in MOD_PLSQL.
https://plus.google.com/u/0/110572140611875149373/posts

However I want to develop it as below image wherein users are authenticated against OS or Windows Active directory (via LDAP or etc.).
https://plus.google.com/u/0/110572140611875149373/posts

Is there any way this can be achieved from MOD_PLSQL? Please help me with the same.

With regards
Venkat Raghaven.D
Re: OS authentication in mod_plsql [message #596668 is a reply to message #596659] Wed, 25 September 2013 10:14 Go to previous message
John Watson
Messages: 8922
Registered: January 2010
Location: Global Village
Senior Member
That is all in the docs,
http://docs.oracle.com/cd/E37115_01/index.htm
or you could throw out whatever you have written and do it with APEX instead where it is standard functionality.
Previous Topic: DATA Entry form
Next Topic: Oracle Apex Versions - 3.2, 4.1 & 4.2 - Oracle Support
Goto Forum:
  


Current Time: Thu Mar 28 09:08:57 CDT 2024